Legal document
Privacy Policy
GDPR
12 sections
01
Introduction
The purpose of this privacy policy is to inform users of the Solutat platform about how their personal data is collected, used, and protected.
Solutat is committed to processing personal data in compliance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) as well as applicable French legislation.
02
Data controller
JUBE (EURL)
81 Boulevard de l’Ardiller
49260 Montreuil-Bellay – France
RCS Angers 831 924 592
Email: contact@solutat.fr
03
Personal data collected
Identification and account
- Last name and first name
- Pseudonym
- Email address
- Declared professional information
- Proof of professional eligibility (SIRET number or, failing that, a certificate of training in hygiene and health conditions), if applicable
- Account settings
Platform activity
- Content of published ads (text, images, prices, descriptions)
- Messages exchanged via the internal messaging system
- Transaction history
- Data required for order tracking
Tax and regulatory data
- Data collected to comply with accounting and tax obligations, notably under the European DAC7 Directive
Technical data
- IP address
- Connection logs
- Technical identifiers
- Navigation data
- Cookies and trackers
Payment details
- Payments are processed by Stripe Connect. Solutat does not store any complete bank card data.
04
Data origin
Personal data may be collected when you:
- Create an account on the platform
- Publish an ad
- Make a transaction
- Use the internal messaging system
- Contact support
- Browse the site
05
Purposes and legal bases for processing
Platform and transaction management
- Creation and management of user accounts
- Publication and management of listings
- Connecting users
- Order, transaction, and dispute management
- Payment and disbursement of funds via Stripe Connect
Security and fraud prevention
- Account security
- Manual verification of professional information provided during registration
- Fraudulent behavior detection
- Platform bypass prevention
Compliance with legal obligations
- Accounting and tax obligations
- Compliance with regulatory obligations applicable to digital platforms (including DAC7)
Platform improvement
- Website Usage Analysis
- Feature enhancement
- Audience measurement (subject to cookie consent)
Solutat does not sell or rent personal data to third parties for commercial purposes.
06
Shelf life
Personal data is kept only for the duration necessary for the purposes for which it was collected:
- User account: for the entire duration of the account's existence
- Transaction data: applicable statutory period for accounting obligations (up to 10 years if applicable)
- Tax data (DAC7): according to the applicable legal retention period
- Professional eligibility verification: kept in a non-public area, accessible only to Solutat, until the account is validated or deleted.
- Technical logs: retention period proportionate to security requirements
- Cookies and statistical data: depending on consent settings
In the event of account deletion, data is deleted or anonymized, except where there is a legal retention obligation.
07
Data recipients
Data may be shared with the service providers and partners necessary for the platform to function:
- Stripe - payment service provider and fund management
- Sendcloud — logistic partner for shipment management and carrier disputes
- o2switch — platform host
- Technical service providers necessary for the operation of the site (security, maintenance)
- Partners contributing to the improvement of the platform, in compliance with the GDPR
These service providers and partners act as data processors or recipients within the meaning of the GDPR, and are subject to confidentiality obligations. The data may also be disclosed to administrative or judicial authorities when required by law.
08
Data transfers outside the European Union
Certain providers, notably Stripe, may process data outside the European Union.
In this case, these transfers are governed by appropriate safeguards in accordance with the GDPR, notably through the use of standard contractual clauses approved by the European Commission.
09
Your rights
In accordance with the GDPR, you have the following rights:
Right of access
Right of rectification
Right to erasure
Right to restriction of processing
Right to object
Right to data portability
To exercise your rights, contact: contact@solutat.fr — proof of identity may be requested. In the event of a dispute, you may lodge a complaint with the CNIL.
10
Cookies
The platform uses cookies that are necessary for its operation, enabling in particular:
- User session management
- Site security
- The proper functioning of the platform's features
A cookie consent banner is displayed upon the first visit. The user's choice is kept for 6 months. The user can accept or refuse non-essential cookies via this banner.
Audience measurement cookies may be used subject to consent via the cookie banner. Preferences can be changed at any time by clearing the browser cookies.
11
Data security
Solutat implements appropriate technical and organizational measures to protect personal data:
- Restricted data access
- Securing connections
- Database protection
- Access monitoring
12
Policy modification
This privacy policy may be modified to reflect legal, technical, or regulatory developments.
The current version is the one published on the platform.